mirrors/nextcloud-documentation
3
0
Fork 0
mirror of https://github.com/nextcloud/documentation.git synced 2025-10-26 11:18:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add hints to use newest PHP version

Browse Source
This commit is contained in:
Lukas Reschke 2015-06-01 17:58:02 +02:00
parent 30d92cf8c2
commit b4db9a23e1
1 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
admin_manual/configuration_server/harden_server.rst
View File

@ -18,7 +18,11 @@ run ownCloud Server on Apache2 on a Linux environment.
Limit on Password Length
------------------------
ownCloud uses the bcrypt algorithm and thus for security and performance reasons, e.g. Denial of Service as CPU demand increases exponentially, it only verifies the first 72 characters of passwords. This applies to all passwords that you use in ownCloud: user passwords, passwords on link shares, and passwords on external shares.
ownCloud uses the bcrypt algorithm and thus for security and performance reasons,
e.g. Denial of Service as CPU demand increases exponentially, it only verifies
the first 72 characters of passwords. This applies to all passwords that you use
in ownCloud: user passwords, passwords on link shares, and passwords on external
shares.
Operating system
----------------
@ -43,6 +47,17 @@ It is highly recommend to enable hardening modules such as SELinux where
possible. See :doc:`../installation/selinux_configuration` to learn more about
SELinux.
Use newest PHP version
**********************
Some security features and hardenings in PHP are only available in the latest
PHP release and thus it is recommended to run the latest PHP version. You can
find the latest version on http://php.net/.
While distributions are trying to backport security patches there have been
quite some cases where some has been missed or only backported after a long
period of time, sometimes up to a few years. Also all security hardenings
are usually not backported.
Deployment
----------